d444 Privacy Policy — How We Protect Your Personal Data

1 Introduction & Scope

d444 is an online betting and casino platform operating at https://d444.io, primarily serving players located in Bangladesh. We understand that the privacy of our players is a matter of the highest importance, and we are committed to handling all personal data responsibly, transparently, and securely.

This Privacy Policy applies to all personal data collected and processed in connection with:

• Registration and maintenance of a d444 player account.
• Use of any betting, casino, or slot game feature available on d444.
• Deposits, withdrawals, and all financial transactions conducted through d444's cashier.
• Customer support interactions, including live chat and email correspondence.
• Participation in d444 promotions, bonuses, tournaments, or loyalty programmes.
• Browsing the d444 website as a visitor, whether registered or not.

This policy applies equally to players accessing d444 via desktop browser and mobile browser. d444 operates solely through its web platform and does not currently offer a dedicated mobile application; however, this policy will be updated if an application is launched.

Where this policy refers to personal data, we mean any information that identifies you as an individual or that, in combination with other data, could be used to identify you. This includes your name, date of birth, mobile number, email address, financial account details, and technical identifiers such as your IP address and device fingerprint.

2 Personal Data We Collect

The categories of personal data that d444 collects from players and website visitors are set out in the table below. Data collection is proportionate to the purpose for which it is needed and is kept to the minimum necessary.

d444 does not collect special-category sensitive personal data such as racial or ethnic origin, political opinions, religious beliefs, trade union membership, genetic or biometric data (beyond identity document photographs used for KYC), health data, or sexual orientation. The KYC identity document photographs are used exclusively for age and identity verification and are not processed for biometric recognition purposes.

3 How We Collect Your Data

d444 collects personal data through the following channels:

• Direct submission: Data you provide when completing the registration form, submitting KYC documents, filling in your account profile, contacting support, or responding to a promotion.
• Automated technical collection: Technical data (IP address, device information, session data) collected automatically when you visit d444's website, regardless of whether you are logged in. This collection is performed via server logs and first-party cookies.
• Transaction processing: Financial data generated when you initiate a deposit or withdrawal through the d444 cashier, received from or confirmed by the relevant Payment Method provider (bKash, Nagad, Rocket, or Upay).
• Game and betting activity: Gameplay data generated automatically by d444's platform and by the integrated game provider systems (Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, Ezugi) as you interact with betting markets and casino games.
• Responsible gaming interactions: Data generated when you activate, modify, or remove a responsible gaming tool from your account settings.
• KYC verification partners: In some cases, d444 may use a trusted third-party identity verification service to assist with document authentication. Any such service operates under a strict data processing agreement with d444 and may not use your data for any purpose other than KYC verification on d444's behalf.

4 Purposes & Legal Basis for Processing

d444 processes personal data only where we have a lawful basis for doing so. The table below sets out the primary purposes for which we process your data and the legal basis that applies in each case.

Where d444 relies on legitimate interest as the legal basis for processing, we have assessed that the processing is necessary for the stated purpose, that the processing does not override your privacy rights, and that the benefit to the platform and its player community justifies the use of your data. You have the right to object to processing carried out on this basis — see Section 9 for details.

Where d444 relies on your consent as the legal basis (specifically for direct marketing), you may withdraw that consent at any time without affecting the lawfulness of processing carried out before withdrawal. Instructions for withdrawing marketing consent are provided in Section 11.

5 Sharing Your Personal Data

d444 does not sell, rent, or trade your personal data to third parties for their own commercial or marketing purposes. Data is shared with third parties only in the specific circumstances set out below, and only to the extent strictly necessary for the stated purpose.

• Payment Method Providers: To process deposits and withdrawals, d444 shares transaction data (amount, reference number, account identifier) with the relevant mobile banking service — bKash, Nagad, Rocket, or Upay. These providers process this data under their own privacy policies and are independent data controllers for their portion of the transaction.
• Game Providers: To deliver casino games and slots, d444 integrates with game studios including Pragmatic Play, Evolution Gaming, NetEnt, Microgaming, Spribe, and Ezugi. These providers receive a player session token and account identifier to load games and return results; they do not receive your full personal profile.
• KYC and Identity Verification Partners: Where a third-party identity verification service is used to assist with KYC, your identity document data is shared with that provider solely for verification purposes under a binding data processing agreement.
• Fraud Prevention and Security Services: Technical data (IP address, device fingerprint, session behaviour) may be shared with trusted cybersecurity and fraud detection service providers to identify and prevent account abuse, money laundering, and unauthorised access.
• Legal and Regulatory Authorities: d444 will disclose personal data to law enforcement agencies, financial intelligence units, or regulatory bodies where required by applicable law, valid legal process, or court order. d444 will not notify you of such a disclosure where prohibited by law from doing so.
• Professional Advisors: d444's legal counsel, auditors, and accountants may access personal data on a strictly confidential, need-to-know basis in connection with their professional services to d444.

6 Cookies & Tracking Technologies

d444 uses cookies and similar client-side storage technologies to operate core platform functionality, remember your preferences, and analyse how the website is used in aggregate. The following table describes the cookies currently in use on d444.

d444 does not currently use third-party advertising cookies, social media tracking pixels, or retargeting technologies. If this changes, this policy will be updated and players will be notified with a minimum of 7 days' prior notice.

Most browsers allow you to view, manage, and delete cookies through their settings. Deleting or blocking the Session Cookie and Security Cookie will prevent you from logging into your d444 account. Blocking the Analytics Cookie has no impact on your account functionality. Instructions for managing cookies are available in your browser's help documentation.

7 Data Retention

d444 retains personal data for as long as is necessary to fulfil the purpose for which it was collected, or as required by applicable legal, regulatory, or audit obligations. The following retention periods apply:

• Active Account Data: Retained for the full duration of your d444 account being open and active, plus a minimum of 5 years following account closure, to satisfy record-keeping requirements for financial transactions and dispute resolution.
• KYC Documentation: Retained for a minimum of 5 years from the date of submission, in line with standard anti-money laundering record-keeping practices.
• Financial Transaction Records: Retained for a minimum of 5 years from the date of each transaction.
• Customer Support Correspondence: Retained for 3 years from the date of the last interaction, to support dispute resolution and quality assurance.
• Self-Exclusion Records: Retained indefinitely (or for the duration of the self-exclusion period plus 5 years thereafter) to prevent a player from being re-admitted to the platform during an active self-exclusion, and to support responsible gaming obligations.
• Technical and Log Data: Retained for 12 months from the date of collection, after which it is deleted or fully anonymised.
• Marketing Consent Records: Retained for 3 years from the date of consent or the date of last marketing interaction, whichever is later, to demonstrate that communications were sent on a valid consent basis.

When data is no longer required and no legal retention obligation applies, d444 ensures that it is securely deleted or rendered permanently anonymous so that it can no longer be linked to any individual.

8 Data Security

d444 takes the security of your personal data seriously and has implemented a range of technical and organisational measures designed to protect your data against unauthorised access, accidental loss, destruction, or disclosure. These measures include:

• TLS/SSL Encryption: All data transmitted between your browser and d444's servers is encrypted using Transport Layer Security (TLS). The d444 website is accessible exclusively over HTTPS.
• Encrypted Data Storage: Sensitive data fields — including passwords (stored as salted hashes), KYC document files, and financial account identifiers — are encrypted at rest using AES-256 encryption.
• Access Controls: Access to player personal data within d444's internal systems is restricted on a strict need-to-know basis. Staff access is role-based and is logged for audit purposes.
• Two-Step Verification (2SV): Players are strongly encouraged to enable two-step verification via SMS on their d444 account. d444 staff accounts are required to use 2SV as mandatory policy.
• Penetration Testing: d444 conducts periodic security assessments and penetration tests of its platform infrastructure to identify and remediate vulnerabilities before they can be exploited.
• Incident Response: d444 maintains a documented data breach response procedure. In the event of a personal data breach that poses a risk to players, d444 will notify affected players and take remedial action as promptly as operationally possible.

9 Your Privacy Rights

As a d444 player, you hold the following rights with respect to your personal data. These rights may be exercised at any time by contacting the d444 support team at [email protected]. d444 will respond to all valid requests within 30 calendar days. Complex or multiple simultaneous requests may take up to 60 days, in which case d444 will notify you of the extended timeline.

Please note that certain rights are subject to limitations where d444 has an overriding legal obligation to retain or process data — for example, KYC and transaction records that must be retained to comply with anti-money laundering obligations cannot be deleted on request during the mandatory retention period.

10 Children & Minors

d444 is strictly an adults-only platform. Our services are available exclusively to individuals aged 21 years and above. d444 does not knowingly collect personal data from individuals under the age of 21, and we do not direct any marketing or promotional content towards minors.

As part of the registration process, all new players are required to confirm that they are aged 21 or above. d444 conducts KYC age verification on all accounts and may require players to submit government-issued identity documentation confirming their date of birth. Any account found to belong to an individual under the age of 21 will be immediately closed, all bonuses will be forfeited, and any deposits made will be returned to the originating payment account after deducting any applicable processing costs.

If you have reason to believe that a minor has registered on d444, please contact us immediately at [email protected] with as much detail as possible. d444 takes underage gambling extremely seriously and will act promptly on any such report.

Parents and guardians who are concerned about access to gambling websites are encouraged to use family-safe internet filtering tools — many of which include gambling category blocks — to restrict access on shared devices.

11 Marketing Communications

d444 may send you promotional emails and SMS messages about new promotions, deposit bonus offers, seasonal campaigns (such as Eid offers, Pohela Boishakh specials, or BPL season promotions), and platform updates. We will only send marketing communications to you where you have given your explicit consent to receive them.

You may withdraw your consent to receive marketing communications at any time by:

• Clicking the "Unsubscribe" link included at the bottom of every promotional email d444 sends you.
• Updating your communication preferences from within your d444 account settings.
• Contacting d444 support at [email protected] and requesting to be removed from all marketing lists.

Withdrawal of marketing consent does not affect your ability to use your d444 account. You will continue to receive transactional and account-management communications (such as deposit confirmation messages, KYC request notifications, and password reset emails) regardless of your marketing preference, as these are necessary for the operation of your account and are sent on the basis of contractual necessity rather than consent.

12 Third-Party Links

The d444 website may contain references to game providers and payment partners. While d444 takes care to work only with reputable and trusted partners, we do not control the privacy practices of third-party organisations and cannot accept responsibility for those practices. Each third party operates under its own privacy policy.

This Privacy Policy applies solely to data collected and processed by d444 through the d444 platform at https://d444.io. If you visit any external website, download any third-party application, or interact with any service outside of d444's direct control, your data will be governed by that third party's privacy policy and terms of service. d444 strongly recommends that you review the privacy policies of any third-party service you use in connection with your gaming activity.

d444 is not responsible for the content, security, or privacy practices of any third-party website, platform, or service, regardless of whether a link to that platform appears on or in connection with d444's services.

13 Changes to This Privacy Policy

d444 reserves the right to update, amend, or replace this Privacy Policy at any time to reflect changes in our data practices, platform features, legal obligations, or regulatory guidance. When material changes are made, d444 will:

• Update the "Last Updated" date shown at the top of this document.
• Display a prominent notice on the d444 platform for a minimum of 7 days following any material update.
• Send a notification email to all registered players with an active account, summarising the key changes and the date on which they take effect.

Minor changes — such as corrections of typographical errors, clarifications of existing practices, or editorial improvements that do not affect the substance of the policy — may be made without advance notice, though the "Last Updated" date will always be revised to reflect any change.

Your continued use of the d444 platform after the effective date of any revised Privacy Policy constitutes your acceptance of the updated terms. If you do not agree with any updated version of this Privacy Policy, you should cease using d444 and may request account closure by contacting [email protected].

d444 recommends that all players review this Privacy Policy periodically to stay informed about how we protect your personal data. The most current version of this policy is always available at https://d444.io/privacy-policy.

14 Contact Us

If you have any questions, concerns, or requests relating to this Privacy Policy or the way d444 handles your personal data, please contact our support team using the details below. All privacy-related enquiries are handled with the highest level of confidentiality.

When submitting a privacy request, please include your registered email address or mobile number, a description of your request, and any relevant account details that will help us locate and process your data accurately and efficiently. d444 may need to verify your identity before fulfilling certain requests, such as data access or erasure requests, to prevent unauthorised disclosure of personal data to a third party.